Answer in brief
CVE-2025-68782 records a Unknown severity vulnerability in scsi: target: Reset t_task_cdb pointer in error case. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (generic), Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (generic), Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=9e95fb805dc043cc8ed878a08d1583e4097a5f80 <6cac97b12bdab04832e0416d049efcd0d48d303b || >=9e95fb805dc043cc8ed878a08d1583e4097a5f80 <45fd86b444105c8bd07a763f58635c87e5dc7aea || >=9e95fb805dc043cc8ed878a08d1583e4097a5f80 <8727663ded659aad55eef21e3864ebf5a4796a96 || >=9e95fb805dc043cc8ed878a08d1583e4097a5f80 <0260ad551b0815eb788d47f32899fbcd65d6f128 || >=9e95fb805dc043cc8ed878a08d1583e4097a5f80 <0d36db68fdb8a3325386fd9523b67735f944e1f3 || >=9e95fb805dc043cc8ed878a08d1583e4097a5f80 <8edbb9e371af186b4cf40819dab65fafe109df4d || >=9e95fb805dc043cc8ed878a08d1583e4097a5f80 <5053eab38a4c4543522d0c320c639c56a8b59908 | 6cac97b12bdab04832e0416d049efcd0d48d303b, 45fd86b444105c8bd07a763f58635c87e5dc7aea, 8727663ded659aad55eef21e3864ebf5a4796a96, 0260ad551b0815eb788d47f32899fbcd65d6f128, 0d36db68fdb8a3325386fd9523b67735f944e1f3, 8edbb9e371af186b4cf40819dab65fafe109df4d, 5053eab38a4c4543522d0c320c639c56a8b59908 |
| Linux/Linuxgeneric | 5.8 | Not reported |
| Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFPgeneric | >=V3.1.6 <* | * |
| Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFPgeneric | >=V3.1.6 <* | * |
| Siemens/SIPLUS S7-1500 CPU 1518-4 PN/DP MFPgeneric | >=V3.1.6 <* | * |
Published upstream
Jan 13, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Sep 8, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Jul 14, 2026
In the Linux kernel, the following vulnerability has been resolved: scsi: target: Reset t_task_cdb pointer in error case If allocation of cmd->t_task_cdb fails, it remains NULL but is later dereferenced in the 'err' path. In case of error, reset NULL t_task_cdb value to point at the default fixed-size buffer. Found by Linux Verification Center (linuxtesting.org) with SVACE.
Quoted source text, attributed separately from HOL analysis.